dependabot-npm_and_yarn 0.93.17 → 0.94.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 64945ec84b780ce05a279eb8ee931b6aaf3382a44c7ebab5040eca929c1bf87b
-  data.tar.gz: '078f787a715c2c28aed522cc43dfef7a17baf5004988f51f3194001400d5badc'
+  metadata.gz: eff1fde4046047ba6579a7d33924859489fb53a67520a48ea2bda226ad5cacc5
+  data.tar.gz: 9cd1b20ce2cf72e5f510acb57980c3528f72c4783ece46b2ca2ab79af3953796
 SHA512:
-  metadata.gz: 7e25116dc4f25d4dea7a725da7512af4d471057d1bab3bd61ce46d18f84cf96e54cc4a4cd586c099d5728e1d43df7b684b798459a0e11e3de5d566d2b5902129
-  data.tar.gz: 5bde28a07e0e9ca40a51cc3c5e3ea24e456ef95426082773b8bc3a087633436acef2ec59dc3bf58e227bbad482e1bb2bb501ee4ae7a3bbf7499f24ef5923d6ad
+  metadata.gz: ca9c168464fc97f8ada84d761795c6b26f2e566a1fc2165613790a001c56d56ac8a9f8e8dac2fb78e89332f622bdee37aacfb898d1b54df3db3d8b546d99c12d
+  data.tar.gz: 48b38f4d77d627c210ddf8e47d2c33c35e947953beae372c419808f5a326560b8bb495f14797dbd32ce3e2ded1857d8d52faa1f420f9e2c97ad89ef04b1165ee

data/lib/dependabot/npm_and_yarn.rb

@@ -9,3 +9,18 @@ require "dependabot/npm_and_yarn/file_updater"
 require "dependabot/npm_and_yarn/metadata_finder"
 require "dependabot/npm_and_yarn/requirement"
 require "dependabot/npm_and_yarn/version"
+
+require "dependabot/pull_request_creator/labeler"
+Dependabot::PullRequestCreator::Labeler.
+  register_label_details("npm_and_yarn", name: "javascript", colour: "168700")
+
+require "dependabot/dependency"
+Dependabot::Dependency.register_production_check(
+  "npm_and_yarn",
+  lambda do |groups|
+    return true if groups.empty?
+    return true if groups.include?("optionalDependencies")
+
+    groups.include?("dependencies")
+  end
+)

data/lib/dependabot/npm_and_yarn/metadata_finder.rb

@@ -196,22 +196,6 @@ module Dependabot
           fetch("token")
       end
 
-      def private_dependency_not_reachable?(npm_response)
-        # Check whether this dependency is (likely to be) private
-        if dependency_registry == "registry.npmjs.org"
-          return false unless dependency.name.start_with?("@")
-
-          web_response = Excon.get(
-            "https://www.npmjs.com/package/#{dependency.name}",
-            idempotent: true,
-            **SharedHelpers.excon_defaults
-          )
-          return web_response.status == 404
-        end
-
-        [401, 403, 404].include?(npm_response.status)
-      end
-
       def non_standard_registry?
         dependency_registry != "registry.npmjs.org"
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.93.17
+  version: 0.94.0
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.93.17
+        version: 0.94.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.93.17
+        version: 0.94.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement